CVE-2026-17596

CVE-2026-17596 affects Nexus Repository 3. A stored XSS issue arises when a user with nexus:blobstores:create or nexus:blobstores:update can set a blob store name containing malicious script, which then executes in other users’ browsers when viewing system health-check status. Root cause: unsafe ...

CVE-2026-17596 Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name

Nexus Repository 3 was found to be vulnerable to stored cross-site scripting XSS. A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script content, which would later execute in the browser of another user viewing system...

PT-2026-53024

Name of the Vulnerable Software and Affected Versions regclient affected versions not specified Description Authentication credentials for a registry may be leaked to external servers. This occurs when a malicious registry server, a malicious blob store, or a registry that fails to restrict...

Malicious code in Be.Vlaаոdеren.Basisrеgisters.BlobStore (NuGet)

--- -= Per source details. Do not edit below this line.=-...

CVE-2023-46741 CubeFS leaks magic secret key when starting Blobstore access service

CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow users to read sensitive data from the logs which could allow them escalate privileges. CubeFS leaks configuration keys in plaintext format in the logs. These keys...